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Amendments to the Claims : 

This listing of claims replaces all prior versions and listings of claims in the application: 
Listing of Claims : 

1. (Previously Presented) A computer-implemented method, comprising: 
encrypting a message using a symmetric key to generate an encrypted message; 
sending the encrypted message to an intended recipient without making the symmetric 

key immediately accessible to the intended recipient; 

providing the symmetric key to a third party; and 

if the intended recipient signs and returns to the third party a receipt including a 
representation of the encrypted message, transferring, by the third party, the receipt to a sender 
and providing the symmetric key to the intended recipient. 

2. (Previously Presented) The computer-implemented method of claim 1 wherein 
the receipt signed by the intended recipient contains an identifier computed from the message 
and the symmetric key using a cryptographically secure hash function. 

3. (Previously Presented) A computer-implemented method, comprising: 

at a sender, encrypting a message using a symmetric key, encrypting the symmetric key 
to make the symmetric key accessible to a third party but not immediately accessible to an 
intended recipient and sending the encrypted message and the encrypted symmetric key to the 
intended recipient; 

at the intended recipient, signing a receipt including a representation of the encrypted 
message and sending the receipt and the encrypted symmetric key to the third party; and 

at the third party, transferring the receipt to the sender and providing the symmetric key 
to the intended recipient if the receipt is properly signed. 
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4. (Canceled) 

5. (Previously Presented) A computer-implemented method for certifying receipt of 
a message, the message being sent from a sender to an intended recipient and being encrypted by 
a symmetric key, the method executing at a third party distinct from the sender and the intended 
recipient, the method comprising: 

receiving a separately encrypted message header associated with the message and a 
certified receipt originating from the intended recipient, the certified receipt including a first 
message identifier signed by the intended recipient; 

decrypting the separately encrypted message header to expose a symmetric key and a 
second message identifier; 

verifying the certified receipt, including verifying a signature of the intended recipient 
and that the first and second message identifiers are the equivalent; and 

after verifying the certified receipt, forwarding the certified receipt to the sender; and 
forwarding the symmetric key to the intended recipient. 

6. (Canceled) 

7. (Previously Presented) A computer-implemented method, comprising: 
creating a message header that includes a symmetric key and a message identifier 

associated with a message for transmission to an intended recipient; 
encrypting the message using the symmetric key; 

public key encrypting the message header using a public key of a third party; 

attaching the message header to the encrypted message forming a certified message and 
forwarding the certified message to the intended recipient; 

receiving a certified receipt originating from the intended recipient, the certified receipt 
being verified at the third party and forwarded to a sender after verification; and 

verifying validity of the receipt using the stored symmetric key and the certified message. 
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8. (Previously Presented) A computer-implemented method for providing a receipt 
for a message, the message being sent from a sender to an intended recipient and the method 
executing at the recipient, the method comprising: 

receiving an encrypted message from a sender, the encrypted message encrypted by a 
symmetric key; 

creating a signed receipt for the encrypted message including signing a hash of the 
encrypted message and returning the signed receipt to a third party; 

after verification of the signed receipt at the third party, receiving the symmetric key 
from the third party; and 

decrypting the encrypted message using the symmetric key. 

9. (Previously Presented) The computer-implemented method of claim 8 wherein 
the step of receiving the symmetric key includes not receiving the symmetric key until a 
successful transfer of the signed receipt to the sender. 

10. (Currently amended) The computer-implemented method of claim I [[6]], further 
comprising: 

storing a copy of the certified receipt and the symmetric key; and 
verifying the validity of the certifi e d receipt using the stored symmetric key and the 
certifi e d message. 

1 1 . (Previously Presented) A computer-implemented method for generating a receipt 
associated with a message, where the receipt is created without exposing content of the message 
to an intended recipient, comprising: 

receiving the message encrypted by a symmetric key; 
receiving a hash of the symmetric key; and 

generating a receipt including generating a message identifier prior to decrypting the 
message, the message identifier including a representation of the hash of the symmetric key and 
the message encrypted by the symmetric key, 
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wherein the message identifier is able to be used to verify receipt of the message at the 
intended recipient without exposing the message content to an intended recipient. 

12. (Previously Presented) The computer-implemented method of claim 11, wherein: 
generating a receipt including includes using a hash function to generate the message 

identifier. 

1 3 . (Previously Presented) The computer-implemented method of claim 1 1 , further 
comprising: 

receiving a first message identifier at the intended recipient; 

the generating step including generating a receipt including a second message identifier, 
at the intended recipient; and 

sending the receipt and the first message identifier to a third party. 

14. (Previously Presented) The computer-implemented method of claim 13, further 
comprising: 

receiving the receipt, at the third party; 
verifying the receipt without accessing message content; and 
providing the receipt to a sender. 

15. (Previously Presented) The computer-implemented method of claim 1 1 , where: 
the message is encrypted with the symmetric key prior to sending to the intended 

recipient; and 

the symmetric key is sent to the intended recipient from a third party so that the intended 
recipient can decrypt the message. 

16. (Previously Presented) The computer-implemented method of claim 11, further 
comprising: 

sending the encrypted symmetric key to the intended recipient with the message; 
at the intended recipient, sending the encrypted symmetric key to a third party with a 
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receipt that includes a representation of the message identifier; and 

sending the receipt to a sender after verification of the receipt. 

17. (Previously Presented) A computer-implemented method for generating a signed 
receipt associated with a message without exposing content of the message, comprising: 

receiving a message encrypted by a symmetric key; 
receiving a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 
by the symmetric key; and 

signing the representation to generate a signed receipt, 

wherein the signed receipt is generated prior to decrypting the message and receiving the 
symmetric key. 

18. (Previously Presented) The computer-implemented method of claim 17, further 
comprising: 

sending the signed receipt to a third party for transfer to a sender; and 
verifying validity of the signed receipt at the third party. 

1 9. (Previously Presented) The computer-implemented method of claim 1 8, further 
comprising: 

allowing a recipient access to content of the message if the signed receipt is verified at 
the third party. 

20. (Canceled) 

21. (Canceled) 

22. (Previously Presented) A computer-implemented method for time-stamping a 
message without exposing content of the message to a time stamping authority, comprising: 

encrypting a message using a symmetric key; 
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computing a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 
by the symmetric key; and 

time-stamping the representation, including sending the representation to a time-stamping 
authority and receiving from the time-stamping authority a time stamp certificate including the 
representation, a time, and a sender identification and a recipient identification for the message. 

23. (Previously Presented) A computer-implemented method for time-stamping a 
message without exposing content of the message to a time stamping authority, comprising: 

encrypting a message using a symmetric key; 
computing a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 
by the symmetric key; and 

time-stamping the representation, including sending the representation to a time-stamping 
authority and receiving from the time-stamping authority a time stamp certificate including the 
representation, a time, a sender identification and a recipient identification for the message and at 
least one of a public key of the sender and a public key of the recipient. 

24. (Previously Presented) A computer-implemented method for generating a signed 
receipt certifying that a message has been received at a particular time by an intended recipient, 
without exposing content of the message, comprising: 

receiving a message having content, wherein the message is encrypted by a symmetric 

key; 

receiving a hash of the symmetric key; 

generating a representation of the hash of the symmetric key and the message encrypted 
by the symmetric key, wherein the representation is generated prior to decrypting the message 
and receiving the symmetric key; and 

time-stamping the representation, including sending a time stamp certificate including the 
representation, a time, and a sender identification and a recipient identification for the message. 
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25. (Previously Presented) The computer-implemented method of claim 24, further 
comprising: 

sending the time-stamped representation to a third party such that the time stamp can be 
verified by the third party without exposing the content of the message to the third party; and 
verifying validity of the signed receipt at the third party. 

26. (Previously Presented) The computer-implemented method of claim 25, further 
comprising: 

allowing an intended recipient access to the content of the message if the signed receipt is 
verified at the third party. 

27. (Previously Presented) A computer-implemented method for generating a signed 
receipt for a message certifying a sending time and a receiving time by an intended recipient 
without exposing content of the message, comprising: 

receiving a message encrypted with a symmetric key; 
receiving a hash of the symmetric key; 

receiving a time stamp certificate including a representation of the hash of the symmetric 
key and the encrypted message, a time, and a sender identification and a recipient identification 
for the message, the time stamp certificate being time-stamped at time of sending; 

time-stamping the representation at a time of receiving; 

combining the representation time-stamped at the time of sending and the representation 
time-stamped at the time of receiving to provide a combined receipt; 
signing the combined receipt; and 

sending the combined receipt to a third party such that the combined receipt can be 
verified by the third party without exposing content of the message to the third party. 

28. (Previously Presented) The computer-implemented method of claim 27, further 
comprising: 

verifying validity of the signed receipt at the third party. 
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29. (Previously Presented) The computer-implemented method of claim 27, further 
comprising: 

allowing an intended recipient access to the content of the message if the signed receipt is 
verified at the third party. 

30. (Previously Presented) The computer-implemented method of claim 1, further 
comprising: 

computing a hash of the symmetric key; and 

making the hash of the symmetric key accessible to the intended recipient, wherein the 
receipt contains a representation of the symmetric key. 

3 1 . (Previously Presented) A computer-implemented method for securely sending a 
message, comprising: 

encrypting a message using a symmetric key; 
computing a hash of the symmetric key; and 

generating a representation of the hash of the symmetric key and the encrypted message; 
sending a request including the representation to a time stamping authority; 

receiving from the time stamping authority a time stamp certificate including a time 
stamped representation of the hash of the symmetric key and the message encrypted by the 
symmetric key; 

generating a certified message including the time stamp certificate; and 
sending the certified message to a recipient. 

32. (Previously Presented) The computer-implemented method of claim 3 1 , wherein: 
generating the representation includes using a one-way hash. 

33. -35. (Canceled) 

36. (Previously Presented) A computer-implemented method of for securely sending 
and receiving a message, using a third party to verify authenticity of the message, comprising: 
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at a sender: 

encrypting a message using a symmetric key to generate an encrypted message; 
sending the encrypted message to an intended recipient without making the 
symmetric key immediately accessible to the intended recipient; and 
providing the symmetric key to a third party; 
at the intended recipient: 

receiving the encrypted message from the sender; 

creating a signed receipt for the encrypted message, including signing a hash of 
the encrypted message and returning the signed receipt to the third party; 

after verification of the signed receipt at the third party, receiving the symmetric 
key from the third party; and 

decrypting the encrypted message using the symmetric key; 
at the third party: 

receiving the signed receipt from the recipient; 

verifying the signed receipt; 

transferring the verified receipt to the sender; and 

providing the symmetric key to the intended recipient. 

37. (Previously Presented) The computer implemented method of claim 36, wherein: 
at the sender: 

sending the encrypted message to the intended recipient includes encrypting the 
symmetric key with a public key of the third party and sending the encrypted symmetric key to 
the intended recipient so that the intended recipient cannot access the symmetric key or the 
message prior to the intended recipient returning the signed receipt to the third party; and 

encrypting the message using a symmetric key to generate the encrypted message 
includes creating a first hash of encrypted content of the message and including the first hash of 
the encrypted content in the encrypted message; 
at the intended recipient: 

returning the signed receipt to the third party includes creating a second hash of 
the encrypted content in the message, sending the second hash of the encrypted content in the 
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message, forwarding the encrypted symmetric key to the third party for the third party to decrypt 
the key, but not sending the encrypted message to the third party; 
at the third party: 

providing the symmetric key to the intended recipient after verifying the signed 
receipt from the intended recipient; 

verifying the signed receipt includes verifying that the first hash of the encrypted 
content equals the second hash of the encrypted content; and 

providing the symmetric key to the intended recipient includes decrypting the 
encrypted symmetric key sent by the recipient. 

38. (Previously Presented) The computer-implemented method of claim 1, wherein: 
sending the encrypted message to the intended recipient includes encrypting the 

symmetric key with a public key of the third party and sending the encrypted symmetric key to 
the intended recipient so that the recipient cannot access the symmetric key or the message prior 
to the intended recipient returning the signed receipt to the third party; and 

encrypting a message using a symmetric key to generate an encrypted message includes 
creating a first hash of encrypted content of the message and including the first hash of the 
encrypted content in the encrypted message. 

39. (Previously Presented) The computer-implemented method of claim 3, further 
comprising: 

at the sender, creating a first hash of encrypted content of the message and sending the 
first hash to the recipient; 

at the recipient, creating a second hash of the encrypted content in the message, sending 
the second hash to the third party and decrypting the encrypted message after receiving the 
symmetric key from the third party; and 

at the third party, comparing the first hash to the second hash to verify that the first hash 
is equal to the second hash, decrypting the encrypted symmetric key, wherein providing the 
symmetric key does not occur until after comparing the first and second hashes. 
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40. (Currently amended) The computer-implemented method of claim 1 [[4]], further 
comprising: 

decrypting the encrypted symmetric key for providing to the intended recipient. 

41 . (Previously presented) The computer-implemented method of claim 40, wherein: 
decrypting the encrypted symmetric key includes decrypting the encrypted symmetric 

key received from the intended recipient, wherein the intended recipient received the encrypted 
symmetric key from the sender. 

42. (Currently amended) The computer-implemented method of claim I [[4]], further 
comprising verifying; the receipt by the third party, wherein: 

providing the symmetric key to the intended recipient occurs after verifying the signed 

receipt. 

43. (Currently amended) The computer-implemented method of claim 3 [[4]], further 
comprising verifying the signed receipt by the third party, wherein: 

verifying the signed receipt includes determining that a hash of the encrypted message 
created by the sender is equivalent to a hash of the encrypted message created by the intended 
recipient. 

44. (Currently amended) The computer-implemented method of claim 3 [[4]], 
wherein: 

verifying the signed receipt ensures that the intended recipient received an encrypted 
message sent by the sender. 

45. (Previously Presented) The computer-implemented method of claim 5, wherein 
the message identifier includes a hash of the encrypted message, the method further comprising: 

verifying that the message identifier signed by the intended recipient equals the message 
identifier in the separately encrypted message header. 
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46. (Previously Presented) The computer-implemented method of claim 5, wherein: 
forwarding the symmetric key to the intended recipient occurs after verifying the certified 

receipt. 

47. (Currently amended) The computer-implemented method of claim I [[6]], 
wherein: 

providing forwarding the encrypted symmetric key to the third party without exposing the 
message to the third party. 

48. (Previously Presented) The computer-implemented method of claim 7, wherein 
the method does not include sending the message to the third party. 

49. (Previously Presented) The computer-implemented method of claim 8, further 
comprising: 

receiving a first hash of the encrypted message from the sender; 
hashing the encrypted message to create a second hash of the encrypted message; and 
sending the first and second hashes to the third party for the third party to verify that the 
first hash equals the second hash. 

50. (Previously Presented) The computer-implemented method of claim 17, further 
comprising: 

receiving a first hash of encrypted content; 

hashing the received encrypted message content to create a second hash of the encrypted 
content; and 

sending the first and second hashes to a third party for verification. 

5 1 . (Previously Presented) The computer-implemented method of claim 3 1 , further 
comprising: 
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sending the representation of the hash of the symmetric key and the encrypted 
message to an intended recipient, wherein the intended recipient does not have access to the 
symmetric key for decrypting the encrypted message at the time of receipt. 



